Skip to content

Instantly share code, notes, and snippets.

@sethhall
Created October 6, 2014 15:21
Show Gist options
  • Save sethhall/8b774afd4946757c93f8 to your computer and use it in GitHub Desktop.
Save sethhall/8b774afd4946757c93f8 to your computer and use it in GitHub Desktop.
Updated msoffice sigs
# Jason Batchelor Edits, 9/19/2014
# Signatures informed by the following resource
# http://www.garykessler.net/library/file_sigs.html
signature file-olecf {
file-magic /(\xd0\xcf\x11\xe0\xa1\xb1\x1a\xe1)/
file-mime "application/olecf", 150
}
signature file-ooxml {
file-magic /(\x50\x4b\x03\x04\x14\x00\x06\x00)/
file-mime "application/vnd.openxmlformats-officedocument", 100
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment